diff --git a/hosts/ildkule/services/journald-remote.nix b/hosts/ildkule/services/journald-remote.nix index 6e78c53..0a02e4c 100644 --- a/hosts/ildkule/services/journald-remote.nix +++ b/hosts/ildkule/services/journald-remote.nix @@ -33,20 +33,27 @@ in networking.firewall.allowedTCPPorts = [ cfg.port ]; - systemd.sockets."systemd-journal-remote".socketConfig = { - IPAddressDeny = "any"; - IPAddressAllow = [ - "127.0.0.1" - "::1" - values.ipv4-space - values.ipv6-space + systemd.sockets."systemd-journal-remote" = { + listenStreams = lib.mkForce [ + "" + "0.0.0.0:${toString cfg.port}" + "[::0]:${toString cfg.port}" ]; + socketConfig = { + IPAddressDeny = "any"; + IPAddressAllow = [ + "127.0.0.1" + "::1" + values.ipv4-space + values.ipv6-space + ]; - LoadCredential = let - inherit (config.security.acme.certs.${domainName}) directory; - in [ - "key.pem:${directory}/key.pem" - "cert.pem:${directory}/cert.pem" - ]; + LoadCredential = let + inherit (config.security.acme.certs.${domainName}) directory; + in [ + "key.pem:${directory}/key.pem" + "cert.pem:${directory}/cert.pem" + ]; + }; }; }